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AMENDMENTS TO THE CLAIMS 

Please find below a listing of claims to replace all prior versions, and listings, of claims in the 
present patent application: 

1.-22. (cancelled) 

23. (currently amended) The e nd us e r d e vic e d e fin e d in claim 22, An end user device for ' 

communication with a server, comprising: 

2 a control entity operative to support a session with the server for an 

authenticated user; 

2 a memory store operative to store sensitive information during the session: 

2 a user interface for interfacing with the authenticated user: and 

2 a network interface for interfacing with the server: 

the control entitv being fiHther operative to (i) applv a policv based on stimuli received 
via the user interface and the network interface to determine whether confidentiality of 
the sensitive information stored in the memory store is to be preserved and (ii^ 
responsive to determining that confidentiality of the sensitive information stored in flie 
memory store is to be preserved, take an action to preserve confidentiality of the 
sensitive information stored in the memory store: 

wherein said stimuli comprise user commands received via the user interface and 
wherein determining that confidentiality of the sensitive information stored in the 
memory store is to be preserved comprises detecting a user command to terminate the 
session: 

wherein said stimuli comprise user conmiands received via the user interface etnd 
wherein determining that confidentiality of the sensitive information stored in the 
memory store is to be preserved comprises detecting a user command to suspend the 
session: 

wherein said stimuli comprise user commands received via the user interface and 
wherein determining that confidentiality of the sensitive information stored in the 
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memory store is to be preserved comprises detecting a user command to authenticate a 
new user other than the authenticated user: 

wherein said stimuU comprise network commands received via the network interface 
and wherein determ ining ; that confidentiaUtv of the sensitive information stored in the 
memory store is to be preserved comprises detecting a network command to terminate 
the session: 

wherein said stimuli comprise network commands received via the network interface 
and wherein determining that confidentiality of the sensitive information stored in the 
memory store is to be preserved comprises detecting a network command to suspend 
the session; 

wherein said stimuli comprise pilot messages received via the network interface and 
wherein determining that confidentiality of the sensitive information stored in the 
memory store is to be preserved comprises detecting a prolonged absence of pilot 
messages received firom the network interface. 

24. (previously presented) The end liser device defined in claim 23, fiirther comprising an 
RF-ip detector operative to detecting an identification code of a potential user 
proximate to the end user device, the RF-ID detector finther operative to provide a 
detected identification code to the control entity. 

25. (original) The end user device defined in claim 24, the control entity being adapted to 
effect a comparison of the detected identification code to an identification code 
associated with the authenticated user. 

26. (original) The end user device defined in claim 25, the control entity being adapted to 
estimate a distance between the authenticated user and the end user device based on 
the comparison. 

27. (original) The end user device defined in claim 26, wherein said stimuli comprise the 
distance estimated by the control entity and wherein determining that confidentiality of 
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the sensitive information stored in the memory store is to be preserved comprises 
detecting that said distance exceeds a predetermined threshold. 

28. (original) The end viser device defined in claim 26, wherein said stimuli comprise the 
distance estimated by the control entity and wherein determining that confidentiality of 
the sensitive information stored in the memory store is to be preserved comprises 
detecting that said distance continuously exceeds a predetermined threshold for a 
predetermined amount of time. 

29. (original) The end user device defined in claim 26, wherein said stimuli comprise the 
distance estimated by the control entity and wherein determining that confidentiality of 
the sensitive information stored in the memory store is to be preserved comprises 
detecting that an integral of said distance over time exceeds a predetermined threshold. 

30. (original) The end user device defined in claim 29, the control entity being adapted to 
receive an indication of a distance between the authenticated user and the end user 
device. 

3 1 . (original) The end user device defined in claim 30, wherein said stimuli comprise said 
distance and wherein determining that confidentiality of the sensitive information 
stored in the memory store is to be preserved comprises detecting that said distance 
exceeds a predetermined threshold. 

32. (original) The end user device defined in claim 30, wherein said stimuli comprise the 
distance and wherein determining that confidentiality of the sensitive information 
stored in the memory store is to be preserved comprises detecting that said distance 
continuously exceeds a predetermined threshold for a predetermined amount of time. 

33. (original) The end user device defined in claim 30, wherein said stimuli comprise the 
distance and wherein determining that confidentiality of the sensitive information 
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Stored in the memory store is to be preserved comprises detecting that an integral of 
said distance over time exceeds a predetermined threshold. 

34. (currently amended) The end user device defined in claim [[+5]] 23, wherein the 
control entity being operative to take an action to preserve confidentiality of the 
sensitive information stored in the memory store comprises rendering the sensitive 
information stored in the memory store inaccessible to potential users of the end user 
device other than the authenticated user. 

35. (currently amended) The end user device defined in claim [[4-5]] 23, wherein the 
control entity being operative to take an action to preserve confidentiality of the 
sensitive information stored in the memory store comprises erasing the sensitive 
information from the memory store. 

36. (currently amended) The end user device defined in claim [[45]] 23, wherein tiie 
control entity being operative to take an action to preserve confidentiality of the 
sensitive information stored in the memory store comprises scrambling the sensitive 
information in the memory store. 

37. (currently amended) The end user device defined in claim [[iS]] 23, wherein the 
control entity being operative to take an action to preserve confidentiality of the 
sensitive information stored in the memory store comprises disabling the user 
interface. 

38. (currently amended) The end user device defined in claim [[+#]] 23, fiirther 
comprising 

a data bus connected to the memory store, the data bus being adapted for 
transporting data to and from the memoiy store; 

an encryption module commvmicatively coupled to the control entity and to the 
data bus; 
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the control entity being further operative to release read and write commands 
towards the memory store, the write command being accompanied by first data 
intended to be written to the memory store; 

upon the control entity releasing a write command accompanied by said first 
data, the encryption module being operative to encrypt, in accordance with an 
encryption key, said first data and send an encrypted version of said first data 
onto the data bus for writing into the memory store; 

upon the control entity releasing a read conmiand, the encryption module being 
operative to decrypt, in accordance with a decryption key, an encrypted version 
of second data received fi-om the memory store via the data bus and provide 
said second data to the control entity. 

39. (original) The end user device defined in claim. 38, wherein the control entity being ^ 
operative to take an action to preserve confidentiality of the sensitive information 
stored in the memory store comprises changing the decryption key. 

40. (original) The end user device defined in claim 38, wherein the control entity beiiig 
operative to take an action to preserve confidentiality of the sensitive information 
stored in the memory store comprises deleting the decryption key. 

41. (original) The end user device defined in claim 38, wherein the control entity being 
operative to Jake an action to preserve confidentiality of the sensitive information 
stored in the memory store comprises causing the encryption module to use a new 
decryption key different from the previous decryption key. 

42. (original) The end user device defined in claim 41, wherein the control entity being 
operative to take an action to preserve confidentiality of the sensitive information 
stored in the memory store fiirther comprises storing the previous decryption key prior 
to causing the encryption module to use the new decryption key. 
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43. (original) The end user device defined in claim 42, the control entity further operative 
to (iii) determine whether confidentiality of the sensitive information stored in the 
memory store no longer needs to be preserved and (iv) responsive to determining that 
confidentiality of the sensitive information stored in the memory store no longer needs 
to be preserved, cause the encryption module to use said previous decryption key. 

44. (currently amended) The end user device defined in claim [[iS]] 23, the control entity 
being further operative to (iii) determine whether confidentiality of the sensitive 
information stored in the memory store no longer needs to be preserved and (iv) 
responsive to determining that confidentiality of the sensitive information stored in the 
memory store no longer needs to be preserved, take an action to reverse the action 
previously taken to preserve confidentiality of the sensitive information stored in the 
memory store. 

45. (original) The end user device defined in claim 44, wherein the control entity being 
operative to determine whether confidentiality of the sensitive information stored in 
the memory store no longer needs to be preserved comprises the control entity being 
operative to apply a policy based on stimuli received via the user interface and the 
network interface. 

46. (original) The end user device defined in claim 45, wherein said stimuli comprise user 
commands received via the user interface and wherein determining that confidentiality 
of the sensitive information stored in the memory store no longer needs to be 
preserved comprises detecting a host command to unsuspend a svispended session. 

47. (currently amended) The end user device defined in claim [[-t^]] 23 being a mobile 
wireless device. 

48. (cxirrently amended) The end user defined in claim [[+#]] 23, further corhprising a 
label indicative of an inability to function outside a predetermined location. 
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49. - 52. (cancelled) 

53. (previously presented) A method, comprising: 

establishing a healthcare session with an end user device servicing an 
authenticated user; 

providing sensitive healthcare information to the end user device for storage 
thereon during the healthcare session; 

detecting existence of a requirement to preserve confidentiality of the sensitive 
healthcare information; and 

responsive to the detecting, sending a message to the end user device for 
causing the end user device to preserve the confidentiality of the sensitive 
healthcare information; 
wherein detecting existenpe of a requirement to preserve confidentiality of the 
sensitive healthcare information comprises detecting a distance between the 
authenticated user and the end user device and determining that tiie distance exceeds a 
predetermined threshold. 

54. (previously presented) A method, comprising: 

establishing a healthcare session with an end user device servicing an 
authenticated user; 

providing sensitive healthcare information to the end user device for storage 
. thereon during the healthcare session; 
detecting existence of a requirement to preserve confidentiality of the sensitive 
healthcare information; and 

responsive to the detecting, sending a message to the end user device for 
causing the end user device to preserve the confidentiality of the sensitive 
healthcare information; 
wherein detecting existence of a requirement to preserve confidentiality of the 
sensitive healthcare information comprises detecting a distance between the 
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authenticated^ user and the end user device and determining that the distance 
continuously exceeds a predetermined threshold for a predetermined period of time. 

55. (previously presented) A method, comprising: 

establishing a healthcare session with an end user device servicing an 
authenticated user; 

providing sensitive healthcare information to the end user device for storage 
thereon dxiring the. healthcare session; 

detecting existence of a requirement to preserve confidentiality of the sensitive 

healthcare information; and 
* responsive to the detecting, sending a message to the end user device for 

causing the end user device to preserve the confidentiality of the sensitive 

healthcare information; 
wherein detecting existence of a requirement to preserve confidentiality of the 
sensitive healthcare information comprises detecting a distance between the 
authenticated user and the end user device and determining that an integral of the 
distance over- time exceeds a predetermined threshold. 

56. - 60. (cancelled) 
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